RHSA-2024:0606: Moderate: openssh security update
Moderate: openssh security update
Other sources
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.Security Fix(es): ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795) openssh: potential command injection via shell metacharacters (CVE-2023-51385) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:0606?
The severity of RHSA-2024:0606 is classified as Moderate.
How do I fix RHSA-2024:0606?
You can fix RHSA-2024:0606 by updating to the fixed version 8.0p1-19.el8_9.2 of the OpenSSH package.
Which systems are affected by RHSA-2024:0606?
RHSA-2024:0606 affects various versions of Red Hat Enterprise Linux, including ARM 64, Power, and x86_64 architectures.
What specific package updates are included in RHSA-2024:0606?
The updates in RHSA-2024:0606 include patches for the openssh, openssh-clients, openssh-server, and related packages.
What vulnerabilities are addressed in RHSA-2024:0606?
RHSA-2024:0606 addresses a prefix truncation attack vulnerability in OpenSSH.